Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Korea (the Republic of)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
119.194.214.190 attackbots
SSH Invalid Login
2020-10-14 08:02:14
119.194.210.39 attack
Unauthorized connection attempt detected from IP address 119.194.210.39 to port 5555
2020-07-07 04:24:15
119.194.214.43 attackbots
Jun 10 21:51:18 Host-KLAX-C postfix/submission/smtpd[6053]: lost connection after CONNECT from unknown[119.194.214.43]
...
2020-06-11 17:54:39
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.194.21.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37142
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;119.194.21.22.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021100 1800 900 604800 86400

;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 17:36:25 CST 2025
;; MSG SIZE  rcvd: 106
Host info
Host 22.21.194.119.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 22.21.194.119.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
223.149.246.61 attack
Honeypot hit.
2020-04-30 14:06:01
193.118.53.194 attackbotsspam
Unauthorized connection attempt detected from IP address 193.118.53.194 to port 443
2020-04-30 14:25:35
218.72.111.233 attack
lfd: (smtpauth) Failed SMTP AUTH login from 218.72.111.233 (233.111.72.218.broad.hz.zj.dynamic.163data.com.cn): 5 in the last 3600 secs - Thu Jun 21 02:02:43 2018
2020-04-30 14:09:18
114.224.28.42 attackbots
lfd: (smtpauth) Failed SMTP AUTH login from 114.224.28.42 (-): 5 in the last 3600 secs - Thu Jun 21 01:03:55 2018
2020-04-30 14:15:21
117.85.56.65 attack
lfd: (smtpauth) Failed SMTP AUTH login from 117.85.56.65 (65.56.85.117.broad.wx.js.dynamic.163data.com.cn): 5 in the last 3600 secs - Thu Jun 21 00:59:12 2018
2020-04-30 14:14:55
37.49.226.167 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-04-30 14:29:05
106.12.186.121 attack
Last failed login: Thu Apr 30 07:31:54 CEST 2020 from 106.12.186.121 on ssh:notty
There was 1 failed login attempt since the last successful login.
2020-04-30 14:28:55
104.168.44.166 attackbotsspam
Lines containing failures of 104.168.44.166
Apr 28 19:19:17 UTC__SANYALnet-Labs__cac12 sshd[9912]: Connection from 104.168.44.166 port 49337 on 64.137.176.96 port 22
Apr 28 19:19:17 UTC__SANYALnet-Labs__cac12 sshd[9912]: Did not receive identification string from 104.168.44.166 port 49337
Apr 28 19:19:21 UTC__SANYALnet-Labs__cac12 sshd[9913]: Connection from 104.168.44.166 port 52003 on 64.137.176.96 port 22
Apr 28 19:19:22 UTC__SANYALnet-Labs__cac12 sshd[9913]: Address 104.168.44.166 maps to 104-168-44-166-host.colocrossing.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Apr 28 19:19:22 UTC__SANYALnet-Labs__cac12 sshd[9913]: User r.r from 104.168.44.166 not allowed because not listed in AllowUsers
Apr 28 19:19:22 UTC__SANYALnet-Labs__cac12 sshd[9913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.44.166  user=r.r
Apr 28 19:19:24 UTC__SANYALnet-Labs__cac12 sshd[9913]: Failed password for invali........
------------------------------
2020-04-30 14:26:06
49.76.11.187 attack
lfd: (smtpauth) Failed SMTP AUTH login from 49.76.11.187 (-): 5 in the last 3600 secs - Thu Jun 21 02:34:06 2018
2020-04-30 14:05:23
180.114.169.52 attackspambots
lfd: (smtpauth) Failed SMTP AUTH login from 180.114.169.52 (-): 5 in the last 3600 secs - Thu Jun 21 03:00:12 2018
2020-04-30 14:00:06
221.227.111.108 attack
lfd: (smtpauth) Failed SMTP AUTH login from 221.227.111.108 (-): 5 in the last 3600 secs - Wed Jun 20 22:40:11 2018
2020-04-30 14:31:03
134.209.96.131 attack
Apr 30 08:17:39 pve1 sshd[18802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.96.131 
Apr 30 08:17:40 pve1 sshd[18802]: Failed password for invalid user dspace from 134.209.96.131 port 42596 ssh2
...
2020-04-30 14:23:57
183.159.88.46 attack
lfd: (smtpauth) Failed SMTP AUTH login from 183.159.88.46 (-): 5 in the last 3600 secs - Wed Jun 20 23:39:50 2018
2020-04-30 14:19:29
142.0.37.177 attackspambots
lfd: (smtpauth) Failed SMTP AUTH login from 142.0.37.177 (erinys.low-costtowers.com): 5 in the last 3600 secs - Thu Jun 21 04:08:55 2018
2020-04-30 14:21:53
94.23.160.185 attackbots
(sshd) Failed SSH login from 94.23.160.185 (DE/Germany/ip185.ip-94-23-160.eu): 5 in the last 3600 secs
2020-04-30 14:01:46

Recently Reported IPs

142.139.47.179 46.186.126.32 210.255.81.192 128.33.206.101
20.183.149.245 109.187.209.152 253.172.10.184 136.110.128.187
243.116.52.167 238.0.165.165 178.19.3.106 161.180.154.83
227.39.133.141 2.14.91.243 134.105.147.248 30.227.192.248
151.92.35.212 18.177.43.132 120.88.65.114 91.94.16.70